8d4826b49eb3b4eeae0ebf408fea8f90N[.]xls

Reason

office: invalid password

General

Target

8d4826b49eb3b4eeae0ebf408fea8f90N.xls
Size

231KB
MD5

8d4826b49eb3b4eeae0ebf408fea8f90
SHA1

03582039ef2c0a5d24b2978b659fec1980ca6744
SHA256

f6982187f88a3bad2fda7a66fe2f896ae1f5a61efd5dfb0e93c8140d9495ae85
SHA512

e0c59b5e62c4206d42d12eb4ad7eac527f17345b9e3d2c2e9c24c821b7a8c63edf5cf2bdde62881adf66daae94cc0613f9d9cd683a44cf4507eb320a10a47a6b
SSDEEP

6144:6yVcrHi8ATfodfysD1m2ILr/p4uYFtOyx/50Gfy6ZO:aHfAro31mxLeuYFtRT0

Score

8^/10

Office macro that triggers on suspicious action 1 IoCs

Office document macro which triggers in special circumstances - often malicious.

resource	yara_rule
sample	office_macro_on_action